Go Back   MacRumors Forums > Apple Systems and Services > OS X

Reply
 
Thread Tools Search this Thread Display Modes
Old Mar 27, 2010, 05:52 AM   #1
multimania
macrumors member
 
Join Date: Nov 2007
Port 53 Firewall connection attempt

Hi guys, i keep getting this show up in my log:

27/03/2010 09:49:21 Firewall[7800] Stealth Mode connection attempt to UDP 10.0.1.2:59861 from 10.0.1.1:53
27/03/2010 09:49:28 Firewall[7800] Stealth Mode connection attempt to UDP 10.0.1.2:58984 from 10.0.1.1:53
27/03/2010 09:49:29 Firewall[7800] Stealth Mode connection attempt to UDP 10.0.1.2:61034 from 10.0.1.1:53
27/03/2010 09:49:31 Firewall[7800] Stealth Mode connection attempt to UDP 10.0.1.2:59062 from 10.0.1.1:53
27/03/2010 09:49:31 Firewall[7800] Stealth Mode connection attempt to UDP 10.0.1.2:65046 from 10.0.1.1:53

It seems to happen when loading websites, my understanding is limited, but 10.0.1.1 is the Airport Extreme as far as I know. Is this harmless?

Many thanks for any help.

Michael
__________________
MP '08 2.8 Octo, 4GB, 2 x 1.5Tb, 2 x 750Gb. SL 10.6.2, Powerbook 1.5 1GB, 100Gb Leopard. iPhone 3G 8Gb.
multimania is offline   0 Reply With Quote
Old Mar 27, 2010, 05:59 AM   #2
spinnerlys
Guest
 
Join Date: Sep 2008
Location: forlod bygningen
DNS primarily uses User Datagram Protocol (UDP) on port number 53 to serve requests. DNS queries consist of a single UDP request from the client followed by a single UDP reply from the server. The Transmission Control Protocol (TCP) is used when the response data size exceeds 512 bytes, or for tasks such as zone transfers. Some operating systems, such as HP-UX, are known to have resolver implementations that use TCP for all queries, even when UDP would suffice.
from http://en.wikipedia.org/wiki/Domain_Name_System
via http://www.google.com/search?client=...JJKpsQaTuaTBDg
spinnerlys is offline   0 Reply With Quote
Old Mar 27, 2010, 06:02 AM   #3
multimania
Thread Starter
macrumors member
 
Join Date: Nov 2007
Thank you for that! So can i assume it's ok then?
__________________
MP '08 2.8 Octo, 4GB, 2 x 1.5Tb, 2 x 750Gb. SL 10.6.2, Powerbook 1.5 1GB, 100Gb Leopard. iPhone 3G 8Gb.
multimania is offline   0 Reply With Quote
Old Mar 27, 2010, 02:31 PM   #4
Queso
macrumors 603
 
Join Date: Mar 2006
Basically you're seeing a late DNS response which is being dropped because you have Stealth Mode enabled. Because your router (10.0.1.1) isn't really a DNS server it has to forward all requests from your Mac (10.0.1.2) out to your ISP's DNS servers, which also may have to forward the requests on further if they cannot resolve the name to an address themselves. Sometimes the responses take longer than your Mac expects so the firewall closes the connection the request was made on, meaning the returned packet is rejected. The rest of the output is how they get logged by OSX.

Don't worry about it. It's normal behaviour.
Queso is offline   0 Reply With Quote
Old Apr 11, 2012, 10:26 PM   #5
KRDHarris
macrumors newbie
 
Join Date: Mar 2004
How can I turn of “bings” resulting from stealth mode connection attempts?

Thanks for the explanation Queso, but a few weeks ago I started hearing “bings” from my iMac, (including when it was asleep), that I eventually tracked down to the same stealth mode connection attempt as reported in this thread.

I thus have two questions:

(1) How can I turn off the “bings”, as I can see no relevant setting in Firewall preferences?

(2) (Less important, unless no solution to (1))
What might have changed on my iMac to cause this phenomenon to start? (I cannot think of anything relevant that I have changed recently.)

Environment:
27” iMac
2.93 GHz Intel Core i7
12 GB SDRAM
Mac OS X 10.7.3

Thank you
________________________

Quote:
Originally Posted by Queso View Post
Basically you're seeing a late DNS response which is being dropped because you have Stealth Mode enabled. Because your router (10.0.1.1) isn't really a DNS server it has to forward all requests from your Mac (10.0.1.2) out to your ISP's DNS servers, which also may have to forward the requests on further if they cannot resolve the name to an address themselves. Sometimes the responses take longer than your Mac expects so the firewall closes the connection the request was made on, meaning the returned packet is rejected. The rest of the output is how they get logged by OSX.

Don't worry about it. It's normal behaviour.
KRDHarris is offline   0 Reply With Quote

Reply
MacRumors Forums > Apple Systems and Services > OS X

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Similar Threads
thread Thread Starter Forum Replies Last Post
Best monitor connection (VGA/DVI/HDMI) for mini-display port and MBPro 13"? Idgit MacBook Pro 2 Mar 29, 2014 03:19 PM
firewall not allowing connection wildernessbob OS X Mavericks (10.9) 0 Mar 28, 2014 11:46 AM
Ethernet port lighting up, but no connection? Orange Furball Windows, Linux & Others on the Mac 0 Aug 7, 2013 01:57 AM
Apple TV connection using optical port flyshop Apple TV and Home Theater 5 Jan 29, 2013 05:57 PM
thunderbolt port drops display connection on sleep dogmusic Mac mini 0 Dec 1, 2012 02:53 PM

Forum Jump

All times are GMT -5. The time now is 06:33 PM.

Mac Rumors | Mac | iPhone | iPhone Game Reviews | iPhone Apps

Mobile Version | Fixed | Fluid | Fluid HD
Copyright 2002-2013, MacRumors.com, LLC